Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FC0B/BEE7558045B011EBA3696D63C4F9AE02/F5SMh3nFnmXK_OLv3LHLUJEThEw.mft
File:                     F5SMh3nFnmXK_OLv3LHLUJEThEw.mft (raw, json)
Hash identifier:          spXsc0mVANGQ7pWKo1pVt5JNkSuagBJCgRRaF74BFbs=
Subject key identifier:   28:E4:30:DB:49:C0:21:72:AF:AC:53:4C:76:14:7B:FD:4B:FD:CC:A4
Authority key identifier: 17:94:8C:87:79:C5:9E:65:CA:FC:E2:EF:DC:B1:CB:50:91:13:84:4C
Certificate issuer:       /CN=A915FC0B/serialNumber=17948C8779C59E65CAFCE2EFDCB1CB509113844C
Certificate serial:       07BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F5SMh3nFnmXK_OLv3LHLUJEThEw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FC0B/BEE7558045B011EBA3696D63C4F9AE02/F5SMh3nFnmXK_OLv3LHLUJEThEw.mft
Manifest number:          07A5
Signing time:             Sat 04 Apr 2026 21:18:42 +0000
Manifest this update:     Sat 04 Apr 2026 21:18:42 +0000
Manifest next update:     Sat 11 Apr 2026 21:18:42 +0000
Files and hashes:         1: F5SMh3nFnmXK_OLv3LHLUJEThEw.crl (hash: QgpwnbmVOt1ONXYq0bZ15j215G8QVZl77kz9zUZfzx8=)
                          2: 7A75D42E45B211EB99335867C4F9AE02.roa (hash: ROziuwSKt6kD0FKsMikGz3qiR7BqzfxieXrk1A6D870=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FC0B/BEE7558045B011EBA3696D63C4F9AE02/F5SMh3nFnmXK_OLv3LHLUJEThEw.crl
                          rsync://rpki.apnic.net/member_repository/A915FC0B/BEE7558045B011EBA3696D63C4F9AE02/F5SMh3nFnmXK_OLv3LHLUJEThEw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F5SMh3nFnmXK_OLv3LHLUJEThEw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 21:18:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1978 (0x7ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FC0B, serialNumber=17948C8779C59E65CAFCE2EFDCB1CB509113844C
        Validity
            Not Before: Apr  4 21:18:42 2026 GMT
            Not After : Apr 11 21:18:42 2026 GMT
        Subject: CN=69d18032-b9d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a3:0b:41:cf:f5:3b:ee:86:5c:fa:64:4c:88:
                    8c:ef:ca:07:28:97:1c:34:d5:9f:5d:f8:65:3d:65:
                    be:46:94:36:e2:0c:1f:4d:83:3f:4d:92:6c:81:a6:
                    8c:e5:41:8c:64:c6:c0:8e:be:79:84:8f:60:67:3b:
                    83:56:76:6c:69:28:f9:6a:7a:29:78:9d:80:6a:f5:
                    d2:ea:64:4f:7c:00:4a:75:c5:e8:07:df:d7:e4:7e:
                    e1:5b:48:f3:e9:22:0c:d2:62:96:c1:35:b5:8f:be:
                    09:b4:c6:21:c0:b6:00:36:d0:27:42:f5:13:e4:2e:
                    30:12:f0:b6:ed:53:d5:a1:37:fe:09:04:5b:60:7b:
                    f9:d5:1f:6a:b3:68:e6:82:23:94:13:c3:71:1d:b2:
                    3a:21:bf:a2:dc:7e:d3:55:df:2c:43:8c:51:0d:4b:
                    ef:b9:df:f5:b9:3a:87:ae:f1:ac:ff:22:07:d8:af:
                    74:ed:05:f8:cb:19:f7:6a:fa:70:0a:5b:2d:e4:19:
                    1f:99:49:ac:a6:de:c8:72:30:e8:85:44:b2:a6:a1:
                    a2:1e:ab:74:b1:5f:e5:4f:2d:7e:c8:25:3a:fc:a4:
                    e8:c2:5a:63:8b:e0:65:d2:12:c2:05:ef:a3:6c:20:
                    36:4b:bd:99:0f:3b:63:f6:df:91:c0:bf:e5:ee:e9:
                    ab:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:E4:30:DB:49:C0:21:72:AF:AC:53:4C:76:14:7B:FD:4B:FD:CC:A4
            X509v3 Authority Key Identifier:
                keyid:17:94:8C:87:79:C5:9E:65:CA:FC:E2:EF:DC:B1:CB:50:91:13:84:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FC0B/BEE7558045B011EBA3696D63C4F9AE02/F5SMh3nFnmXK_OLv3LHLUJEThEw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F5SMh3nFnmXK_OLv3LHLUJEThEw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FC0B/BEE7558045B011EBA3696D63C4F9AE02/F5SMh3nFnmXK_OLv3LHLUJEThEw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:be:e9:49:ad:12:0d:07:42:90:5e:d4:f0:f3:df:77:c6:b9:
         8d:7a:a9:ae:b5:8e:32:5f:db:5d:c6:a2:8a:72:bc:3e:09:56:
         fd:5c:79:9b:12:a9:a8:76:91:d7:24:42:2a:cc:f8:3c:32:88:
         bc:ce:f3:12:95:f2:b5:6f:cf:86:71:5a:25:67:e6:c7:1a:43:
         7c:39:91:64:4b:03:58:7d:ec:90:50:6f:6e:d7:a1:ca:ce:d7:
         0e:3a:50:0a:f4:61:97:c1:63:df:93:f6:3e:a7:68:00:58:1e:
         87:8f:1c:b8:7d:1b:40:af:04:ec:c3:f4:88:8f:21:a7:4f:07:
         dd:57:3a:f8:e1:de:84:86:c7:a6:95:b6:bc:22:0c:86:03:1f:
         83:5a:f5:81:2d:97:1e:d2:27:74:88:08:61:21:b1:fd:f9:99:
         d6:95:5f:da:fb:f5:4a:3f:7d:23:40:c9:d1:82:7e:bb:15:7e:
         ff:9d:26:f2:f9:2c:b9:5e:ca:cb:e3:b2:f7:14:37:5c:3c:3f:
         23:55:64:46:73:c4:1c:72:3e:e2:f4:ac:d4:11:20:00:38:e1:
         44:2d:0b:62:a1:da:b8:d5:b8:68:62:88:b7:69:9f:8b:da:b2:
         8d:16:33:bc:74:69:55:09:49:0a:ac:a0:11:be:20:80:7c:35:
         10:c9:08:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:32:01 2026 by rpki-client